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A WIRELESS MOBILE PHONE WITH AUTHENTICATED MODE OF 
OPERATION INCLUDNIG HEART BEAT PROFILE BASED 



AUTHENTICATION 



5 



FIELD OF THE INVENTION 



This application is a continuation-in-part application of U.S. Patent 
Application 09/690,679, entitled "A Mobile Digital Communication/Computing 
Device Including A Heart Rate Monitor", filed on October 16, 2000, and claims 
priority for the base materials to said application, which specification is hereby 

» 

1 0 fully incorporated by reference. 

* • 



FIELD OF THE INVENTION 

» 

The present invention relates to the field of wireless mobile phones. More 
specifically, the present invention is related to a wireless mobile phone having an 
1 5 authenticated mode of operation available only to an authenticated user, in 
particular, a user authenticated via a heart beat profile of the user. 

BACKGROUND OF THE INVENTION 
Advances in microprocessor and telecommunication technology have led 
20 to wide spread deployment and adoption of mobile devices, such as wireless 
mobile phones. For wireless mobile phones, in addition to wireless telephony, 
the late models are often equipped with advanced. capabilities, such as calendar, 

• * 

address book, access to the World Wide Web (WWW), emails, and so forth. 



Much of these functionalities are designed to increase the productivity of 
25 business users. As a result, it is not surprising that business users constitute a 
major user segment of wireless mobile phones, especially for the high-end 

2 . 
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function rich models. Increasingly, more business data, such as business 
contact information, business plans, sales/marketing strategies, financial reports, 
and so forth, are being stored on wireless mobile phones. 

However, unlike personal computers or other computing devices, where 

5 user authentication, through e.g. user log-in, are routinely provided with virtually 
all operating systems, few if any operating systems of wireless mobile phones 
provide means to authenticate users. As a result, under the prior art, wireless 
mobile phones are at risk of unauthorized usage, as well as data being 
compromised by unauthorized accesses. 

0 Thus, it will be desirable if protection against unauthorized access of user 

data and/or usage of wireless mobile phones can be provided. 



embodiments, but not limitations, illustrated in the accompanying drawings in 
which like references denote similar elements, and in which? 

Figure 1 illustrates a front view of a wireless mobile phone incorporated 



Figures 4a-4b illustrate the operational flow of the relevant aspects of the 
operating logic of Fig. 3, in accordance with one embodiment; 

Figure 5 illustrates a front view of another wireless mobile phone 
25 incorporated with the teachings of the present invention, in accordance with an 
alternate embodiment; 



15 



BRIEF DESCRIPTION OF THE DRAWINGS 
The present invention will be descn'bed by way of exemplary 



20 



with the teachings of the present invention, in accordance with one embodiment; 

Figures 2-3 illustrate two architectural views of the wireless mobile phone 
of Fig. 1, in accordance with one embodiment; 



3 
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Figures 6a«6b illustrate two perspective views of another wireless mobile 
phone incorporated with the teachings of the present invention, in accordance 

with yet another embodiment; 

« 

Figures 7a-7b illustrate a front view and a side view of another wireless 
5 mobile incorporated with another aspect of the teachings of the present 
invention, in accordance with yet another embodiment; and 

a 

i 

Figures 8a-8b illustrate a front view and a back view of the identity card of 
. 7b in further detail, in accordance with one embodiment. 



15 



10 

DETAILED D ESCRIPTION OF EMBODIMENTS OF THE INVENTION 
The present invention includes a wireless mobile phone having an 
authenticated mode of operation, available only to an authenticated user, in 

* 

particular, a user authenticated by a heart beat profile of the user. 

Parts of the description will be presented in terms commonly employed by 
those skilled in the art to convey the substance of their work to others skilled in 
the art. The term "wireless mobile phone" as used herein (in the specification 
and in the claims) refers to the class of telephone devices equipped to enable a 
user to make and receive calls wirelessly, notwithstanding the user's movement, 
as long as the user is within the communication reach of a service or base station 
of a wireless network service provider. Unless specifically excluded, the term 
"wireless mobile phone" is to include the analog subclass as well as the digital 
subclass (of all signaling protocols). 

In the following description, various aspects of the present invention will 
25 be described. However, it will be apparent to those skilled in the art that the 
present invention may be practiced with only some or all aspects of the present 
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invention. For purposes of explanation, specific numbers, materials and 
configurations are set forth in order to provide a thorough understanding of the 
present invention. However, it will be apparent to one skilled in the art that the 
present invention may be practiced without the specific details. In other 
instances, well-known features are omitted or simplified in order hot to obscure 
the present invention. 

Various operations will be described as multiple discrete steps in turn, in a 
manner that is most helpful in understanding the present invention, however, the 
order of description should not be construed as to imply that these operations are 
necessarily order dependent. In particular, these operations need not be, 
performed in the order of presentation. 

The phrase "in one embodiment" is used repeatedly. The phrase 
generally does not refer to the same embodiment, however, it may. The terms 
"comprising", "having" and "including" are synonymous, unless the context 
dictates otherwise. 



20 



25 



* 

Referring now to Figures 1-3, wherein a front view and two architecture 
(internal component) views of a wireless mobile phone of the present invention, 
in accordance with one embodiment, are shown. As illustrated, wireless mobile 
phone 100 of the present invention (hereinafter, simply phone 100) is 
advantageously provided with operating logic 240 equipped in particular with 
security function 242, to operate phone 100 in at least an unauthenticated mode 
of operation and an authenticated mode of operation. 

While operating in the unauthenticated mode of operation, i.e. without 
having the user authenticated, operating logic 240 makes available only a limited 

• * * 

or reduced set of functions, whereas under the authenticated mode of operation, 
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i.e. having the user authenticated, operating logic 240 makes available a more 
expanded or the entire set of functions. 

The exact constitution of the limited/reduced set of functions and the 
expanded/full set of functions is application dependent, which may vary from 
5 embodiments to embodiments. In one embodiment, the limited/reduced set of 
functions include only the ability to make an emergency call, such as a 91 1 call, 
otherwise, no other functions, including but not limited to making other calls, 
accessing calendar, email, text messaging, viewing and/or storing documents, 
and so forth, are permitted. These other functions are available only under the 
10 authenticated mode. 

■ 

In another embodiment, the limited/reduced set of functions may 
effectively be a null function set, excluding even the ability to make an 
emergency call, except for notification of the unauthenticated status of the user 
and perhaps, inviting the user to authenticate himself/herself, by e.g. allowing a 
15 hear beat profile of the user to be captured in real time. 1 

In various embodiments, in addition to the above described 

* 

unauthenticated and authenticated modes of operation, operating logic 240 
further supports a provisioning mode of operation, under which phone 100 is 
initially provisioned. Under the initial provisioning mode, conventional 
20 provisioning, such as configuring phone 100 for a particular wireless carrier, a 
particular subscriber and so forth, may be performed. Entry into the initial 
provisioning mode may be effectuated in any one of a number of conventional 
approaches. 

Continue to refer to Figures 1 T 3, for the illustrated embodiment, phone 
25 1 00 is further advantageously equipped with sensors 1 32 to facilitate real time 
capturing of a heart beat profile of the user (while operating in the authenticated 
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mode). Further, operating logic 240, or more specifically, security function 242, 
is endowed to facilitate such capture, and authenticate a user through the heart 
beat profile of the user (prior to operating phone 100 in the authenticated mode). 
In particular, as will be described in more detail below, operating logic 240, 
5 in general, is equipped to establish a reference heart beat profile of a user for 
authentication purpose, and automatically invokes sensors 132 to capture a heart 
beat profile of the user real time, during power on or reset. Further, security 
function 242 is endowed to use the reference and the real time captured heart 
beat profiles of the user to authenticate the user, and determine whether to 

10 continue to operate phone 100 in an unauthenticated mode, or operate phone 
100 in an authenticated mode. 

In other words, under the present invention, operating logic 240 operates 
phone 100 in the authenticated mode, and makes available the expanded/full set 
of functionalities, only if the user has been authenticated by his/her heart beat 

15 profile, otherwise, phone 100 is operated in the unauthenticated mode with only a 
limited/reduced set of functionalities (except in the initial provisioning mode). 

For the embodiment, sensors 132 are disposed along and underneath the 
side surfaces of phone 100. A dynamically determined subset of sensors 132 
are employed to capture the heart beat profile of the user. The subset of sensors 

20 132 to be employed is based on whether the user is holding phone 100 with 
his/her left or right hand, thereby coming into contacts with different ones of 
sensors 132. Discernment of the appropriate subsets of sensors 132, or more 
specifically, the sensing data outputted by sensors 132, to be used, is described 
in detail in parent U.S. Patent Application number 09/690,679 set forth and 

25 incorporated by reference above. 
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The heart beat profile is based on the heart beat data collected over a 
predetermined amount of time. The length of the predetermined amount of time 
to be employed to construct a user's heart beat profile is application dependent, 
and may vary from implementation to implementation. 

Further, operating logic 240, more specifically, security function 242, also 
supports the capturing of a heart beat profile of the user, and its saving as a 
reference for subsequent analysis of a real time captured heart beat profile of the 
user to authenticate the user, before operating phone 100 in the authenticated 
mode. 

In various embodiments, the saving of the reference heart beat profile is 
also supported under a special configuration mode, while operating in the 
authenticated mode. Entry into the configuration mode (while operating in the 
authenticated mode) may also be effectuated in any one of a number of 
conventional means. 

Continuing to refer to Fig. 1.3, additionally, phone.100 includes 
conventional wireless telephony elements, including power switch 122, power 
222, audio communication elements, such as ear speaker 112 and microphone 
114, and non-audio communication elements, such as input key pad 102 having 
a number of alphanumeric input keys and display 108. Further, the non-audio 
input elements may further include scroll button 105, selection buttons 106, and 
"talk" and "end talk" buttons 1 04. These elements are disposed on various 
external surfaces of body 116. 



As illustrated in Fig. 2, upon depression by a user (optionally, for a 
predetermined duration), while phone 100 is in a powered down or lower power 
state, power switch 122 couples power 222 to sensors 132 and other 
components 202-212. Likewise, upon depression by a user (optionally, for a 
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predetermined duration), while phone 100 is in powered up state, power switch 
122 cuts off or reduces power 222 to all or selected ones of sensors 132 and 
other components 202-21 2. 

Externally, phone 100 may also include antenna 110. Keys of key pad 
5 1 02 may be surrounded by, or otherwise include illuminable light emitting diodes 
(LED) in their backgrounds. For the purpose of the present specification, the 
terms "button" and "key" may be considered synonymous, unless the context 
clearly indicates otherwise. 



10 



15 



20 



25 



Internally, in addition to processor 202 and DSP 204, phone 100 also 
includes non-volatile memory 206, general purpose input/output (GPIO) interface 
208, and transmit/receive (TX/RX) 212, coupled to each other, processor 202 
and DSP 204, via bus 214, and disposed on a circuit board 220. 

Except for the novel manner that many of these elements, such as 
processor 202, DSP 204 and so forth, are used in support of making the 
expanded/full set of functionalities available only to an authenticated user, the 
enumerated elements otherwise perform their conventional functions known in 
the art. 

m 

Non-volatile memory 206 is employed to store programming instructions 
and optionally, working data, including operating logic 240 and its security 
function 242. Working data may include callee/messaging party or parties (e.g. 

m 

their phone numbers or IP addresses) with whom user may communicate. • 
Working data may include the. reference and input heart beat profiles of the user. 

Processor 202, assisted by DSP 204, is employed to operate phone 100, 
executing operating logic 240, including security function 242. 

Keys of key pad 1 02 may be employed to enter alphanumeric data, 
including entering a sequence of alphanumeric data for the phone number or 
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address of a "callee". Selected sequence of the keys (such as "*#") may also be 
employed to denote a user instruction to return to the unauthenticated mode of 
operation, if entered while operating in the authenticated mode of operation, or to 
return to the authenticated mode of operation, if entered while operating in the 
unauthenticated mode of operation (provided the user is authenticated). 

Scroll key 105 and companion selection keys 106 may be employed to 
scroll and select various options or list items of various menu options or selection 
lists, including scrolling and selecting list items presented for user interactions to 
verify the user's wellness. For the embodiment, scroll key 105 may be selected 
in one of two positions, an "up" position or a "down" position for scrolling a 
selection list in an "up" direction and a "down" direction respectively. Similarly, 
scroll and selection keys 105/106 may also be employed to select a menu item to 
convey a user instruction to return to the unauthenticated mode, if the selection is 
made while operating in the authenticated mode, or to return to the authenticated 
mode, if the selection is made while operating in the unauthenticated mode 
(provided the user is authenticated). 

GPIO 208 may be employed to generate input signals, such as a 
corresponding "alphanumeric" signal in response to a user selection of one of the 
keys of key pad 102, a "scroll" signal" (or more specifically, a "scroll up" or a 

* 

"scroll down" signals) in response to a user selection of scroll key 1 05, a 
"selection" signal in response to a user selection of select button 106, and so 
forth. 

TX/RX 212 may be employed to transmit and receive communication 
signals for a call and/or a text message. TX/RX 212 may be a radio frequency 
transceiver, and support one or more of any of the known signaling protocols, 
including but are not limited to CDMA, TDMA, GSM, and so forth. 
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The constitutions of these elements are known, and will not be further 
described. 

As to operating logic 240, including security function 242, it may be 
implemented in the assembly or machine instructions of processor 202, or a high 
level language that can be compiled into these assembly or machine languages. 
In alternate embodiments, all or portions of operating logic 240, including security 
function 242 may be implemented in firmware and/or hardware. 

Accordingly, except for the enhancements provided, phone 1 00 otherwise 
represents a broad range of wireless mobile phones, including both the analog 
as well as the digital types (of all signaling protocols), substantially rectangular 
uni-body as illustrated, or curved uni-body, as well as multi-portions, such as "flip 
phones" to be illustrated later. 



Figure 4 illustrates the operational flow of the relevant aspects of 
operating logic 240, in accordance with one embodiment. As illustrated, on start 
up/reset (such as depression of power on/off button 122 for the required 

* 

predetermined duration by a user), operating logic 240 enables phone 100 to 
operate in the earlier described unauthenticated mode, making available only a 
limited/reduced set of functionalities, block 402. Thereafter, operating logic 240 
waits for additional user input, block 404. 

Recall from earlier description, upon depression by a user, while phone 
100 is in powered down or low power state, power switch 122 couples power to 
sensors 132 and other components 202-212 of phone 100: For the embodiment, 
on power on/reset, operating logic 240 causes sensors 132 to sense the heart 
beat pattern of the user, based on the user's fingers 250 in contact with sensors 
132. Resultantly, after a predetermined elapsed amount of time, a heart beat 
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profile of an authorized user who is aware of the authentication requirement, and 
have properly held the phone with his/her fingers in contact with sensors 132, 
would have a heart beat profile of the user taken or captured in real time, for 

* • 

authentication. 

« 

5 Accordingly, under the present invention, heart beat profile based 

authentication is seamless integrated with the power on/reset process. 

Continuing to refer to Fig. 4, on receipt of inputs, operating logic 240 
determines if the input is a heart beat profile captured by sensors 132 in real time 
(more specifically, by DSP 204, after it processes the signals output by sensors 
10 132 into a heart beat profile), block 406. 

If the user input is a heart beat profile, operating logic 240 (or more 
specifically, security function 242) further determines if phone 100 is operating in 
the unauthenticated mode, within the authenticated mode (including whether it is 
within the configuration mode of the authenticated mode), or the initial 

i 

15 provisioning mode, block 407. 

If phone 100 is determined to be operating in the configuration mode 
within the authenticated mode, or the initial provisioning mode, operating logic 
240 (or more specifically, security function 242) saves the captured heart beat 
profile as a reference heart beat profile for future user authentication, block 408. 

* • 

20 If phone 100 is determined to be operating in the unauthenticated mode, 

operating logic 240 (or more specifically, security function 242) initiates the heart 
beat profile based authentication process, authenticating the user by comparing 
the real time captured heart beat profile, against the previously saved reference 
heart beat profile, block 409. 

25 If the heart beat profile does not substantially match the previously saved 

reference heart beat profile, block 410, operating logic 240 (or more specifically, 
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security function 242) reports the authentication failure, block 412, and continues 
to operate phone 100 in the unauthenticated mode at block 404. 

However, if the inputted heart beat profile substantially matches the 
previously saved reference heart beat profile, block 410, operating logic 240 (or 
more specifically, security function 242) enables phone 100 to operate in the 
authenticated mode, block 414. Thereafter, operating logic 240 continues 
operation at block 404. 

The precision level at which a real time captured heart beat profile is to be 
considered substantially matching with a reference heart beat profile is 
application dependent. Preferably, different user selectable precision levels are 
offered. As with other user selectable options, the selection may be facilitated in 
any one of a number of known user selection techniques. 

Back at block 406, if the input is determined not to be heart beat profile 
input, operating logic 240 determines if the input is a user instruction to return to 
the unauthenticated mode of operation (e.g. a user selecting or inputting such 
command using alphanumeric keys 102 and/or scroll/select keys 105 and 106 
while operating in an authenticated mode of operation), block 416. 

If the input is determined to be a user instruction to return to the 
unauthenticated mode of operation, operating logic 240 (or more specifically, 
security function 242) returns phone 100 to operate in the unauthenticated mode, 
block 418. Thereafter, operating logic 240 continues operation at block 404. 

In one embodiment, before exiting to the unauthenticated mode, operating 
logic 240 (or more specifically, security function 242) causes a user selectable 
"resume" (i.e. re-authentication) option to be rendered on display 108. Selection 
of the option is processed as if phone 100 is being powered on or reset. That is, 
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operating logic 240 automatically causes sensors 132 to capture another heart 
beat profile of the user for authentication purpose. 

If the input is determined to be other user inputs, operating logic 240 
handles the other user inputs in an application dependent manner, block 420. In 
particular, if the input is a user instruction to return to the authenticated mode of 
operation, operating logic 240 continues operation at block 404, and awaits for 
another heart beat profile input to re-authenticate the user. If the input is other 
conventional inputs, the inputs are processed as in the prior art. Thereafter, 
operating logic 240 continues operation at block 404. 



Figure 5 illustrates another embodiment of the wireless mobile phone of 
the present invention. More specifically, Fig; 5 illustrates a front view of the 
alternate embodiment. The alternate embodiment is substantially that of the 
embodiment of Fig. 1 , except that phone 100 is substantially rectangular in 
1 5 shape, whereas phone 500 has a curved shape. 



* 

Figures 6a-6b illustrate yet another embodiment of the wireless mobile 

* 

phone of the present invention. More specifically, Fig. 6a-6b illustrate two 
perspective views of the embodiment. The embodiment is also substantially that 
20 of the embodiments of Figs. 1 and 5, except that phone 100 is substantially 
rectangular, phone 500 has a curve shaped body, whereas phone 700 has a 
multi-section body. The multi-section form factor includes a first section 71 6b 
and a second section 716c, and the second section 716c is further comprised of 

■ 

at least two sub-sections 716d-716e. The first and second sections 716b-716c 
25 may pivot towards each other as denoted by direction arrow 706a or away from 
each other opposite to the direction denoted by arrow 706a. Sub-section 71 6d 

■ 

14 




Attorney Docket No: 109909-132695 Express Mail No: 

IPGNo:P061z EL692649113US 



may rotate relative to sub-section 71 6e as denoted by the directions denoted by 
arrows 706b. In other words, phone 700 may be considered as an improved 
version of what is commonly referred to as "flip" phones. 

. Similar to the earlier described embodiments, phone 700 is provided with 
operating logic having a security function as earlier described, and sensors 732. 

In alternate embodiments, second section 716c may be a uni-section, i.e. 
it is not further sub-divided into to relatively pivotable sub-sections. 



In yet other embodiments, the reference heart beat profile may be 
10 provided to the wireless mobile phone in a secure manner, e.g. read from an 
identity card, via an identity card reader additionally provided to the wireless 
mobile phone. 

Figures 7a-7b illustrate one such embodiment. As illustrated in Fig* 7b, 
wireless mobile phone 100 is additionally endowed with an identity card reader 
15 740. Identity card reader 740 (optionally, assisted by a device driver additionally 
provided to supplement operating logic 240) is equipped to retrieve the earlier 

* 

described reference heart beat profile from identity card 742. 

Preferably, identify card 742 has a form factor that is difficult to forge, and 
its issuance is governed by a secured process. Resultantly, security for wireless 
20 mobile phone 100 is further enhanced. 

For the embodiment, identity card 742 comprises a smart electronic card 

■ 

744 (commonly referred to as a smart card) (see Fig. 8a-8b), and the reference 
heart beat profile is pre-stored in the embedded smart card 744. Operating logic 
240 (optionally, supplemented by a corresponding reader device driver) retrieves 
25 the reference heart beat profile from embedded smart card 744, on detection of 
the presence of identity card 742. 
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In various embodiments, the reference heart beat profile may be further 
protected via encryption, requiring operating logic 240 to possess the proper 
decryption key to recover the reference heart beat profile after retrieval. 

In yet other embodiments, the reference heart beat profile may be further 
protected via an authentication protocol, requiring wireless mobile phone 100 to 

* ■ 

♦ 

be equipped with the appropriate credential to authenticate itself to smart card 
744, before being allowed by smart card 744 to access the pre-stored reference 
heart beat profile in smart card 744. 

In yet other embodiments, the reference heart beat profile may be 
imprinted on identity card 742, and identity card reader 740 is an optical reader. 

In yet still other embodiments, the reference heart beat profile may be 
encoded via a magnetic strip disposed on a surface of identity card 742, and 
identity card reader 740 is a magnetic code reader. 

These are just a few example, other equivalent encoding/storing and 
reading/retrieving techniques may also be employed instead. 



Conclusion and Epilogue 
Thus, it can be seen from the above descriptions, a novel wireless mobile 
phone that can afford protection against unauthorized access to user data and/or 
20 usage of the phone has been described. 

While the present invention has been described in terms of the foregoing 
embodiments, those skilled in the art will recognize that the invention is not 
limited to the embodiments described. The present invention can be practiced 
with modification and alteration within the spirit and scope of the appended 
25 claims. 
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In particular, the present invention may be practiced with employing 
additional and/or other means to authenticate a user. 

Thus, the description is to be regarded as illustrative instead of restrictive 
on the present invention. 
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